[ossig] Researcher to demo Intel chip attack : News : Security - ZDNet Asia

[NP Lee]

  Researcher to demo Intel chip attack

By Matthew Broersma 
<mailto:zdnews-asia at cnet.com&Subject=Feedback%20on%20%27Researcher%20to%20demo%20Intel%20chip%20attack%27>, 
ZDNet UK
Thursday, July 17, 2008 07:07 AM

*Intel chips contain serious flaws that can be exploited over the 
Internet to cause crashes of or gain complete control over systems, 
according to an independent security researcher who plans to release 
proof-of-concept code for such attacks later this year.*

Kris Kaspersky said this week he will present the findings of CPU 
malware-detection research, funded by Endeavor Security, at the Hack In 
The Box conference in Kuala Lumpur, Malaysia, in October.

Kaspersky--who is not affiliated with the security firm Kaspersky 
Lab--said the presentation will include proof-of-concept exploits for 
which he will publicly release the code.

Because the flaws are in the processors themselves, the attacks can be 
carried out regardless of the operating system, and the demonstration is 
planned to include various versions of Windows, Linux and BSD, and 
possibly Mac OS X, Kaspersky said.

"Intel CPUs have exploitable bugs which are vulnerable to both local and 
remote attacks which work against any OS, regardless of the patches 
applied or the applications which are running," Kaspersky said in an 
abstract <http://conference.hitb.org/hitbsecconf2008kl/?page_id=214> of 
the talk.


http://www.zdnetasia.com/news/security/0,39044215,62043832,00.htm?scid=nl_z_ntnd 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mncc.com.my/pipermail/ossig_mncc.com.my/attachments/20080717/bf776259/attachment.html